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- 77?© MAILING DATE of this communication appears on the cover sheet with the correspondence address — 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .1 36 (a). In no event however, may a reply be timely filed 

after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will 

be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this 

communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 

earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)^ Responsive to communication(s) filed on Dec 31, 2001 . 



2a) □ This action is FINAL. 



2b) K This action is non-final. 



3)n Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 
closed in accordance with the practice un^er Ex parte Quayle, 1935 CD. 11; 453 O.G. 213. 



Disposition of Claims 

4)K Claim(s) 1-31 



4a) Of the above, claim(s) 13-16 
5)D Claim(s) 



6)K Claim (s) 1-12 and 17-31 

?)□ Claim(s) 

8)D Claims 



is/are pending in the application. 
_ is/are withdrawn from consideration. 

is/are allowed. 

is/are rejected. 

is/are objected to. 



are subject to restriction and/or election requirement. 



Application Papers 
9) □ The specification is objected to by the Examiner. 

lOlD The drawing(s) filed on is/are objected to by the Examiner. 

1 !)□ The proposed drawing correction filed on is: ajD approved b)D disapproved. 

1 2) 0 The oath or declaration is objected to by the Examiner. 

Priority under 35 U.S.C. § 119 

13) 0 Acknowledgement is made of a claim for foreign priority under 35 U.S.C, § 1 19(a)-(d). 
ain All b)n Some* c)U None of: 

1 . □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. 



3. □ Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(al). 
*See the attached detailed Office action for a list of the certified copies not received. 

14)0 Acknowledgement is made of a claim for domestic priority under 35 U.S.C. § 1 19(e). 



Attachment(s) 

1 5) ^ Notice of References Cited (PTO-892) 

1 6) n Notice of Draftsperson's Patent Drawing Review (PTO-948) 

17) n Information Disclosure Statement(s) iPTO-1449) Paper No(sl. 



181 n Interview Summary (PTO-413) Paper No(s). 

1 91 CD Notice of infomial Patent Application (PTO-1 52) 
20) □ Other: 



U. S. Patent and Trademark Office 

PTO-326 (Rev. 9-00) 
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DETAILED ACTION 



Continued Prosecution Application 



1 . The request filed on 12/31/01 for a Continued Prosecution Application (CPA) under 37 
CFR 1.53(d) based on parent Application No. 09/429,624 is acceptable and a CPA has been 
established. An action on the CPA follows. 



(a) the invention was known or used by others in this country, or patented or described in a printed publication in 
this or a foreign country, before the invention thereof by the applicant for a patent. 

(e) the invention was described in a patent granted on an application for patent by another filed in the United 
States before the invention thereof by the applicant for patent, or on an international application by another who 
has fulfilled the requirements of paragraphs (1), (2), and (4) of section 371© of this title before the invention 
thereof by the applicant for patent. 

2. Claims 1-1 1 are rejected under 35 U.S.C. 102(a) as being anticipated by Gennaro et 
al.(Robust Threshold DSS Signatxires). 

In claim 1 , Gennaro disclose computing shared values over a known and agreed context, 
each value being shared among a distinct subset of the plurality of distributed electronic devices 
and at each of a plurality of the distributed electronic devices, generating a random value using 
said shared values in (pages 35 1 -356 and 362-363). Gennaro disclose at each of a plurality of the 
distributed electronic devices, generating a partial result for the distributed cryptographic 
computation using at least one of random values and computing a final result for the distributed 
cryptographic computation using partial results in (page 365). 



Claim Rejections - 35 USC § 102 
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In claim 2, Gennaro discloses the method of distributed cryptographic computation as 
recited by claim 1, wherein shared values are random keys in (pages 361-368). 

In claim 3, Gennaro discloses the method of distributed cryptographic computation as 
recited by claim 1, wherein shared values are derived from a cryptographic protocol in (page 
365). 

In claim 4, Gennaro discloses the method of distributed cryptographic computation as 
recited by claim 1, wherein shared values are derived cryptographically in (page 361-368). 

In claim 5, Gennaro discloses the method of distributed cryptographic computation as 
recited by claim 1 , comprising the step of implementing a re-representation of a function in (page 
362). 

In claim 6, Gennaro discloses the method of distributed cryptographic computation as 
recited by claim 1, wherein said partial results may include incorrect values in (page 354 and 364). 

In claim 7, Gennaro discloses the method of distributed cryptographic computation as 
recited by claim 1, wherein steps of claim 1 are performed iteratively in (page 365). 

In claim 8, Gennaro discloses the method of distributed cryptographic computation as 
recited by claim 7, comprising changing shared values after step of generating an output based on 
partial result in (pages 355-356). 

In claim 9, Gennaro discloses the method of distributed cryptographic computation as 
recited by claim 3, wherein cryptographic protocol is a cryptographic fimction involving 
exponentiation in (pages 356 and 365). 




# 
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In claim 10, Gennaro discloses the method of distributed cryptographic computation as 
recited by claim 3, wherein cryptographic protocol is an RSA function in (pages 356 and 365). 

In claim 1 1, it is inherent to have a hardware/computing device in Gennaro to store data in 
order to carry out a cryptographic computation. 

3. Claims 1-4 and 9-12,17-31 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Brickell(US 5,867,578). 

In claim 1, Brickell disclose computing shared values over a known and agreed context, 
each value being shared among a distinct subset of the plurality of distributed electronic devices 
and at each of a plurality of the distributed electronic devices, generating a random value using 
said shared values in (col.3, lines 66-67, col.4, lines 1-20). Brickell disclose at each of a plurality 
of the distributed electronic devices, generating a partial result for the distributed cryptographic 
computation using at least one of random values and computing a final result for the distributed 
cryptographic computation using partial results in (col:9, line 10-col.lO, line 31,col.l 1, lines 10- 



In claim 2, Brickell discloses the method of distributed cryptographic computation as 
recited by claim 1, wherein shared values are random keys in (col. 9, lines 34-46). 

In claim 3, Brickell discloses the method of distributed cryptographic computation as 
recited by claim 1, wherein shared values are derived from a cryptographic protocol in (col. 9, 
lines 10-65,col.l0, lines 1-10). 



65). 
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In claim 4, Brickell discloses the method of distributed cryptographic computation as 
recited by claim 1, wherein shared values are derived cryptographically in (col.9, lines 10- 
65,col.l0, lines 1-10). 

In claim 9, Brickell discloses the method of distributed cryptographic computation as 
recited by claim 3, wherein cryptographic protocol is a cryptographic function involving 
exponentiation in (col.9, line 10-col.lO, line 31). 

In claim 10, Brickell discloses the method of distributed cryptographic computation as 
recited by claim 3, wherein cryptographic protocol is an RSA function in (col. 10, lines 52-53). 

In claim 11, Brickell discloses the method of distributed cryptographic computation as 
recited by claim 1, wherein shared values are stored in a hardware device in at least one of 
distributed electronic devices in (col. 7, lines 49-67, coL8, lines 1-14). 

In claim 12, Brickell discloses selecting a subgroup of devices to perform the distributed 
cryptographic communication and computing shared values over a known and agreed context, 
each value being shared among a distinct subset of he subgroup of distributed electronic devices 
in (fig.l, col. 14, lines 9-64). Brickell discloses generating a random value using shared values at 
each distributed electronic devices and generating a partial result for the cryptographic 
computation using a share of the cryptographic value and at least one of random values and 
computing a final result for the distributed cryptographic computation using partial results in ( 
coL3, lines 66-67, col.4, lines 1-20; coL9, line 10-col.lO, line 31,col.ll, lines 10-65). 
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In claims 17-22, Brickell discloses the computed shared value is shared among a subset of 
the distributed electronic devices in (fig.l, col. 14, lines 29-67). 

In claim 23, Brickell disclose wherein the random values depend upon the particular set of 
devices selected for the subgroup in (fig.l and col.9, lines 1 1-30). 

In claim 24, Brickell disclose cryptographic computation is based on an argimient, and 
generated random values are based on an argument in (col.9, lines 10-65,col.l0, lines 1-10). 

In claim 25, distributed cryptographic computation as recited by claim 12 wherein the 
cryptographic computation is based on an argument, and the generated random values are based 
on said argument in (col.3, lines 66-67, col.4, lines 1-20; col.9, line 10-coI.lO, line 31,col.l 1, lines 
10-65). 

In claim 26, Brickell disclose wherein the cryptographic computation comprises digital 
signing in (col.9, line 10-col.lO, line 31,col.ll, lines 10-65). 

In claim 27, Brickell disclose cryptographic computation as recited by claim 12 wherein 
the cryptographic computation comprises digital signing in (col.3, lines 66-67, col.4, lines 1-20; 
col.9, line 10-col.lO, line 31,col.ll, lines 10-65). 

In claims 28-29, Brickell discloses step of using generated random values or shared values 
to detect misbehaving devices in (col. 14, lines 9-28). 

In claims 30-31, Brickell discloses proactively updating a secret cryptographic value used 
in the cryptographic computation in (col. 23, lines 65-col.24, lines 1-10). 
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Conclusion 



4. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

a. Gennaro et al.(Robust and Efficient Sharing of RSA Functions) discloses threshold 
RSA signature schemes. 

b. Beimel et al.(US 5,764,767) discloses a method for secret sharing by a plurality of 
users over a public communication chaimel. 



5. Any inquiry concerning this communication or earlier communication from the examiner 
should be directed to Ho S. Song whose telephone number is (703)305-0042. The examiner can 
normally be reached on Tuesday-Friday from 6:00 am - 4:30 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gail Hayes, can be reached on (703)305-971 1. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the Group receptionist whose telephone number is (703)305-3900. 
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